topic Re: Disadvantages of CPSizeme tool. in Firewall and Security Management

Disadvantages of CPSizeme tool.

Matlu — Wed, 17 Jan 2024 17:49:24 GMT

Hello.

I want to run the CPSizeme tool on the active members of my ClusterXL HA, as well as on my SMS, with the intention of receiving an email with a small "report" that tells me about the status of the resources of my boxes. My question is, is there any "disadvantage" in using this tool?

I am reading the sk88160, and there is a part where they mention the following:

"We recommend not to run cpsizeme for more than 24 hours." .... Does this mean that there can be any risk with my boxes, if I leave the script running for more than 1 day?

My intention is to track the resources of my box on a daily basis for at least 1 week.

Is there any risk of not "stopping" the script if I go over 24 hours once I run it?

Greetings.

Re: Disadvantages of CPSizeme tool.

the_rock — Wed, 17 Jan 2024 17:51:31 GMT

No bro. There are no risks. I had people run it for 2 weeks and its totally fine. It literally does not consume any resources at all.

Best,

Andy

Re: Disadvantages of CPSizeme tool.

Matlu — Wed, 17 Jan 2024 18:03:58 GMT

Buddy,

Is this CPSizeme tool as accurate as using "CPView"?

Re: Disadvantages of CPSizeme tool.

the_rock — Wed, 17 Jan 2024 18:10:07 GMT

I would say yes.

Re: Disadvantages of CPSizeme tool.

Elad_Chomsky — Wed, 17 Jan 2024 19:14:56 GMT

Hi @Matlu ,

The recommendation is not due to any risk. It is just that after 24 hours, the measurements are usually accurate enough to continue. So no need to stress the machine further. But If you feel like you want to get a wider result set, you can definitely run it for more.

Re: Disadvantages of CPSizeme tool.

Matlu — Wed, 17 Jan 2024 19:31:15 GMT

Hello,

The intention is to have an "average" of approximately 7 to 15 days.

So, the idea is to leave the script "RUNNING" during those days, so that a report is sent, on a daily basis.

Once the test period of 7 or 15 days is over, we intend to "turn off" the script.

I understand that to stop the script after the evaluation days, we must follow the next step of the sk:

Is this correct?

Greetings.

Re: Disadvantages of CPSizeme tool.

Elad_Chomsky — Wed, 17 Jan 2024 19:38:08 GMT

Hi @Matlu ,

Yes - It is correct.

Re: Disadvantages of CPSizeme tool.

Matlu — Wed, 17 Jan 2024 21:07:38 GMT

Sorry, for my ignorance, but, these questions that the script asks you, are they "optional"?

I am simply "omitting" them by giving an "Enter" and without putting values, since the client does not have the exact data that we need.

We can just "skip it", right?

We are leaving the default script to work for 24Hrs.
It means that once it finishes executing the script, we will have to wait 24Hrs, so that the mail arrives to the client, right?

Cheers. 🙂

Re: Disadvantages of CPSizeme tool.

genisis__ — Wed, 17 Jan 2024 21:27:30 GMT

The tool has been around for years and is pretty good. I'm not sure if it's been updated over the years, but last time I used it this was not compatible with VSX, it was only useful for standard gateways running GAIA, so again with SMB devices not sure if this will work.

Re: Disadvantages of CPSizeme tool.

Lesley — Wed, 17 Jan 2024 21:34:59 GMT

Give the script an hour when it is done, to collect data. 24 hour is good, don't do more then 2 /3 days.

If you do longer it collects so much data that in the end you will lose the outcome.

Don't count on the e-mail. Just check the box when it is done. I will give you the location of the xml that you can upload on the CP website. There again you can give the ISP speed info again etc.

Re: Disadvantages of CPSizeme tool.

the_rock — Wed, 17 Jan 2024 21:35:55 GMT

Totally agree.

Re: Disadvantages of CPSizeme tool.

Matlu — Wed, 17 Jan 2024 21:46:57 GMT

Hello,

To most of the questions like:

* What is the estimated number of internal users passing through this gateway?
* What is the estimated maximum throughput on this gateway [Mbps]?
* What is the size of your ISP internet pipe [Mbps]?

I simply omitted the interregons, as we do not have the complete information at this time.

The script is already executed.

I simply executed the script (according to the SK, it applies the revision every 24 hours).

I understand that I have to wait, 24Hrs, to get my first report, right?

[Expert@FW:0]# ./cpsizeme

Welcome to Check Point Performance Sizing Utility - version 5.8

It is recommended to run the latest version of the Check Point Performance

Sizing Utility

Do you want to check if an updated version is available (y/n)? [y] n

______________________________

Over the next 24 hours, the utility will collect performance data

from your appliance. It is recommended to run the utility on the

part of the week where you expect peak performance.

______________________________

After running this utility, 2 archive files are created:

1. Detailed archive file - includes all the collected raw performance data used

for analysis & statistics, including information such as connections and

routing tables with IP addresses. Used mainly by Check Point support staff.

2. Summary archive file - needed for generating a PDF document of the gateway

performance statistics of traffic, cpu, memory utilization and an XML file to

be used for appliance sizing. This archive does not include connection data

and IP addresses.

Note: Sharing your performance information with Check Point will help us to

improve our products.

Please choose:

1 Run the utility and automatically send both the detailed & summary

archives to Check Point

2 Run the utility and automatically send only the summary archive to

Check Point

3 Run the utility without sending the data automatically to Check Point

Your choice? [1] 1

Testing connection to Check Point...ok!

Cheers.

Re: Disadvantages of CPSizeme tool.

the_rock — Wed, 17 Jan 2024 21:55:10 GMT

Bro, just follow the prompts and run it for 24 hours. Case closed : - )

Andy

Re: Disadvantages of CPSizeme tool.

Chris_Atkinson — Wed, 17 Jan 2024 23:02:02 GMT

Note the tool is not intended for use on Management servers.

Re: Disadvantages of CPSizeme tool.

genisis__ — Thu, 18 Jan 2024 09:31:31 GMT

Are there plans to update this useful tool to support VSX and SMB devices?

Re: Disadvantages of CPSizeme tool.

Matlu — Fri, 19 Jan 2024 15:21:53 GMT

Hey, Andy.

One query, what is the email listed as "sender" when mailing reports to a destination?

I have configured the SK of CPSizeme, but the problem is that my recipient, who has his corporate email, has not received the email with the report.

I have the doubt, who is the user that appears as "sender" of the report sent by mail.

Greetings.

Re: Disadvantages of CPSizeme tool.

Chris_Atkinson — Fri, 19 Jan 2024 15:27:43 GMT

sizing@checkpoint.com

Re: Disadvantages of CPSizeme tool.

Matlu — Fri, 19 Jan 2024 15:34:57 GMT

My client has not received the automatic report by mail.

Could it be a problem of a possible "Antispam" filter?

Cheers.

Re: Disadvantages of CPSizeme tool.

the_rock — Fri, 19 Jan 2024 16:08:24 GMT

It could be, check to see if any logs about it.

Andy

Re: Disadvantages of CPSizeme tool.

Matlu — Wed, 11 Jun 2025 13:21:56 GMT

Hi, @Chris_Atkinson
Does this tool work in VSX and MDS Cluster environments?
Thanks for your answer.